CVE-2012-2746: 389 Directory Server before 1.2.11.6 (aka Red Hat Directory Server before 8.2.10-3), when the password of a...

Security readout for executives and security teams

This flaw could cause a directory server to write newly changed LDAP passwords into audit logs in plain text. If an authenticated remote user can read those logs, they could learn other users’ passwords. The risk is highest where affected 389 Directory Server or Red Hat Directory Server versions still exist and audit logging was enabled. Exposure is likely limited to legacy deployments running affected 389 Directory Server or Red Hat Directory Server versions with audit logging enabled. Systems upgraded beyond the fixed versions are not indicated as affected in the supplied sources. Prioritize if legacy directory infrastructure remains in production. Directory passwords can unlock broad internal access, so confirmed exposure should trigger patching, log access review, and password rotation for affected accounts. Mitigation focus: Upgrade 389 Directory Server to 1.2.11.6 or later.; Upgrade Red Hat Directory Server to 8.2.10-3 or later.; Review Red Hat and 389 Directory Server vendor guidance for applicable packages..

Prepared

Jun 24, 2026, 12:34 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.